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BUSINESS ANALYSTS MORE 
VISIBLE IN DEV PROJECTS 

BY JEFF FEINMAN 

Business analysts are becoming a more visible and important part 
of software projects because executives realize failed business 
requirements can be costly, according to analyst firm voke. 

Among the analysts surveyed for voke's "Market Snapshot 
Report," 64% reported they have been involved in requirements 
for more than three years; of that total, 16% said they've had a 
hand in requirements for more than 10 years. Theresa Lanowitz, 
voke's founder, interprets that to mean the analysts' role is increas- 
ing. The survey involved more than 100 participants from Fortune 
500 companies, according to voke. 

"Until recently, the business analyst was not viewed as part of 
the critical path to success," Lanowitz said. "The idea of a linear 
life cycle with most emphasis placed on development and testing 
automatically overlooked or discounted the important work being 
done by the analyst. As more mature and optimized enterprises 
move from a linear life cycle to that of a global life cycle, which 
focuses on the elimination of barriers between IT and the line of 
business, the business analyst becomes crucial in delivering an 
optimized business outcome. Without the business analyst gather- 
ing and delivering requirements from and to the appropriate 
stakeholders, the life cycle becomes heavily focused on develop- 
ment, with rework done during the testing phase." 

Lanowitz' sentiments are similar to those of Scott Ambler, 
IBM's practice leader of agile development, who provides insight 
on software development best practices on his website, 
ambysoft.com. "In theory, the idea of having traditional BSAs 
[business systems analysts] involved with a project should work 
quite well, and in practice it often does," Ambler said. "The best 
analysts are organized and great communicators, having the abil- 
ity to distill the critical information from your project stakehold- 
ers out of the information noise that they provide, often through 
a wide range of modeling techniques. For many organizations, the 
addition of BSAs clearly improves the quality of the requirements 
elicitation and analysis continued on page 21 ► 



A guide for GPL compliance 

Law center advises on 'derivative works' 



BY ALEX HANDY 

Thanks to the people behind 
BusyBox, the GNU General 
Public License has a lot more 
teeth than was once thought. To 
complement litigation against 
GPL violators, the Software 
Freedom Law Center has 
released "A Practical Guide to 
GPL Compliance" for licensees. 

According to the compliance 
guide, "GPL violations are often 
caused or compounded by a fail- 
ure to adopt sound practices for 
the incorporation of GPL'd com- 
ponents into a company's internal 
development environment. We 
suggest companies establish such 
practices before building a prod- 
uct based on GPL'd software." 

The guide goes on to state 
that many companies focus too 



heavily on the copyleft aspects of 
the GPL, or the portions of the 
license that address freedom of 
use and distribution from a pure- 
ly monetary and rights stand- 
point. Thus, many corporate 
users of the GPL recognize it 
only as a license that turns soft- 
ware into a free, legally unen- 
cumbered building block. 

Unfortunately, it is not this 
portion of the license that tends 
to get people into trouble, states 
the guide. "In our experience 
with GPL enforcement," write 
the SFLC's Bradley M. Kuhn, 
Karen M. Sandler and Aaron 
Williamson, the guide's authors, 
"few redistributors' compliance 
challenges relate directly to the 
copyleft provisions; this is doubly 
true for most embedders. 



"Instead, the distributions of 
GPL'd systems that we encounter 
typically consist of a full operating 
system, including components 
under the GPL (e.g., Linux, Busy- 
Box) and components under the 
LGPL (e.g., the GNU C Library). 
Sometimes, these programs have 
been patched or slightly improved 
by direct modification of their 
sources, resulting unequivocally in 
a derivative work." 

And derivative works must be 
resubmitted into the open- 
source community, under the 
terms of the GPL. This is the 
fundamental "infectious" aspect 
of the GPL that made it so con- 
troversial in its early years. 

"Alongside these programs," 

the guide states, "companies often 

continued on page 19 ► 



Microsoft bows to virtual license terms 



BY DAVID WORTHINGTON 

Adapting to the changing IT 
landscape, Microsoft has modi- 
fied its licensing terms for server 
applications to accommodate 
virtualization. 

The company has announced 
licensing and product support 
policies that it said would help 
customers create more dynamic 
systems with virtualized soft- 
ware. The new terms allow cus- 
tomers to reassign licenses from 
one server to another within a 
server farm as frequently as 
needed. 

Previously, the onus was on 
Microsoft customers to acquire 
more licenses when an applica- 




'Anything that makes implementing 
virtualized systems easier is a 
good thing/ 



—Sola Rotibi, principal analyst 
with Macehiter Ward-Dutton 



tion was moved from one server 
to another. Licenses were not 
assigned if applications were not 
moved back. 

"IDC research is finding that 
the use of server virtualization is 
moving past the early adopter 
stage and is quickly becoming 



a mainstream solution," Al 
Gillen, research vice president 
for system software at IDC, said 
in a prepared statement. "As IT 
professionals update their stan- 
dard server images for new 
installations, they are increasingly 
continued on page 21 ► 
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businesses stifl dent know how much energy their IT is using. So how do you build and 
manage your IT to reduce energy consumption? With greener software from IBM; a complete 
range of energy-efficient software to optimize your infrastructure, boost business process 
efficiency and put practices in place for truly responsible collaboration. With energy at a premium, 
greener software can help shave millions off your IT and energy budgets, A greener world 
starts with greener business. Greener business starts with IBM. 
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Turning data into INTELLIGENCE 

Associating your organizational data with Location is the foundation for making critical 
strategic and operational decisions that improve performance, competitiveness, 
efficiency, responsiveness and effectiveness. 

PITNEY BOWES MAPI NFO enables organizations to leverage Java, .NET or Web Services to build custom location intelligence 
solutions or add location to existing systems. Through this customization, organizations can: 

• improve asset management by optimizing asset Location 

■ View key performance indicators such as revenue by sales territory 

• Improve fLeel productivity and customer service by determining the best path for multi-point deliveries or mutes 

Industry examples of Location intelligence in action: 

• Telecommunications: strategically locate ceLl towers for maximum coverage and market penetration or identify 
new revenue through build-Dut opportunities 

• Insurance: lower aggregated risk to naturaL disasters by visualizing existing customers along with fLood, 

hurricane and other relevant data 

• Government: create e-government, citizen self-service web portals 

■ RefcaiL: understand your true trade area for site selection and target marketing opportunities 

• Banking: optimize branch and ATM networks, improve saLes performance and target marketing efforts 

Visit www,mapinfoxom/sdtimes to download whltepapers on deployment and uses of location intelligence, 
view streaming media pieces, download free SDK's and register for upcoming webinars. 




JJ Pitney Bowes 
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DataRush takes Java to data flow 

Multicore library scraps von Neumann, tackles parallelism with pipelining 



BY ALEX HANDY 

To tackle the problems associat- 
ed with re-architecting pro- 
grams for parallel processing, 
Pervasive Software has fielded 
a release candidate of its data 
flow-based DataRush multicore 
library for Java. 

Steve Hochschild, manager 
of business development for 
DataRush, said Pervasive 
believes the solution to multi- 
core woes is the use of data flow 
rather than von Neumann pro- 
gramming models. "Unlike tra- 
ditional von Neumann program- 
ming, where you have a program 
counter and the application 
marches down through the code 
line by line, in a data flow archi- 
tecture, each component is 
unique and independent, and is 
only connected to others 
through input and output 
queues," said Hochschild. 

"When a piece of data 
arrives at the input queue, it 
gets taken in and immediately 
processed, then pushed out 
through the output queue. A lot 
of people call this pipelining," 
he said. "Spreadsheets are data 
flow implementations. If you 
type a value into a cell, that cell 




does what it's supposed to do, 
then as soon as that's done, any 
other cell that's using that cell 
as an input also crunches it 
down, and so on." 

Originally designed to help 
programmers with signal pro- 
cessing applications, data flow 
has been a programming model 
for decades. Only now, howev- 
er, are programmers realizing 
its usefulness for overcoming 
parallelism problems. 

JIVING WITH JAVA 

DataRush comes in the form of 
Java libraries and a runtime 
component that decides where 
each component process will 
live and work. Hochschild said 
that designing an application to 
take advantage of DataRush is 



not likely to be effective for 
existing applications. But for 
projects starting from scratch 
and requiring intensive opera- 
tions on a single large chunk of 
data, the potential for saving 
time is phenomenal, he said. 

"You really need to look at 
your application in a different 
way," said Hochschild about 
architecting for DataRush. 
"You look at your application 
and decide what each piece of 
data needs to change. As this 
record is going through the sys- 
tem, what has to happen? You 
lay out the operators, and it's all 
100% Java. If you can take that 
time and study the application 
in that way, we've seen huge 
productivity gains from the 
design-time benefits." 



Hochschild said that the 
included operators can be 
expanded upon, but they 
already have many of the basic 
functions developers need for 
complex data-intensive applica- 
tions. These include text read- 
ers, positioners, sorters, aggre- 
gators and other common 
functions. Once the initial 
design is complete, said 
Hochschild, the time saved on 
development and on the actual 
running of the applications in 
production is significant. 

Pervasive CTO Mike Hos- 
kins said the data flow approach 
to parallelism is gaining a fol- 
lowing among the gurus who 
speak at JavaOne. The method 
hasn't become popular yet, 
Hoskins said, because it is so 



much more effective for bring- 
ing parallelism to inherently 
unparallel applications. 

"I don't think people have 
thought hard about data-inten- 
sive parallelism," said Hoskins. 
"There's one area of software 
parallelism where the solution 
is at hand. It's the sort of low 
hanging fruit of parallelism that 
is around virtualization. You can 
scale out by having multiple 
Web servers. It becomes fairly 
easy to scale the hardware. Your 
software isn't parallel, you're 
just running more copies of the 
same task. 

"The difference in data- 
intensive applications, where 
we play, is you can't do that," 
said Hoskins. "You have to move 
to a world of parallelism. I don't 
think many people are looking 
at that problem. To make a sin- 
gle job run faster is a less com- 
mon area of research, and it's a 
much harder problem." 

Pervasive hopes to have 
DataRush available as a full com- 
mercial product before the end 
of the year. Until then, develop- 
ers can try out the first release 
candidate of the software at 
www.pervasivedatarush.com. I 



IBM respins InfoSphere with eye on global projects 



BY DAVID WORTHINGTON 

IBM introduced updates to its 
InfoSphere product portfolio 
for product information man- 
agement and data integration at 
the recent TDWI World Con- 
ference in San Diego. 

The company rechristened 
and relaunched WebSphere 
Product Center as InfoSphere 
Master Data Management 
Server for Product Information 
Management (MDM Server for 
PIM). MDM Server for PIM is 
a workflow-oriented product 
data hub, and it has been updat- 
ed with several new features. 

The version introduces a 
"task flow" interface that pre- 
sents users with a customized 
role-based homepage and a list 
of tasks that they have to per- 
form against products, said 
Michael Curry, director of 
product strategy and manage- 
ment for InfoSphere. Users can 
drill down to the part of the 
PIM application used to per- 
form the needed action. 

IBM incorporated the Java 
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InfoSphere Information Server has extended languages and 
enhanced support for grid deployment. 



API to ease integration with 
other applications. 

The company introduced its 
InfoSphere middleware earlier 
this year to consolidate its prod- 
ucts for creating, governing and 
managing information across the 
enterprise. To that end, it creat- 
ed hooks for MDM Server for 
PIM to call out to InfoSphere 



Information Server, a data inte- 
gration product, for data cleans- 
ing and validation operations. 

IBM is working to "create 
synergies across InfoSphere 
components to help customers 
deliver projects faster," said Cur- 
ry. At the same time, he noted, 
IBM will maintain a heteroge- 
neous approach and continue to 



work with third-party vendors. 

Some of the biggest chal- 
lenges occur when projects cut 
across borders and cultures. 
IBM has released a new edition 
of InfoSphere Information 
Server to accommodate large 
enterprises with projects that 
operate on a global scale. 

Information Server 8.0 is 
available in simplified and tra- 
ditional Chinese, French, Ger- 
man, Italian, Japanese, Korean, 
Portuguese and Spanish. 

Aside from localization, it is 
designed to handle global names 
and addresses better, said Curry. 

CULTURAL CUES 

IBM added InfoSphere Global 
Name Recognition as a module 
of the InfoSphere Information 
Server platform. Name recogni- 
tion supplies an individual's 
likely cultural background and 
gender. IBM uses a database of 
addresses from the postal records 
of 244 countries registered in the 
DNS, automatically standardiz- 
ing the format of addresses 



according to local rules. 

Just as people and projects 
may span continents, data for 
projects can span server farms. 
IBM has added grid manage- 
ment features to Information 
Server to help administrators 
optimize available resources and 
comply with service level agree- 
ments, said Curry. 

Information Server now 
implements the WS- Security 
(Web Services Security), a com- 
munications protocol, to secure 
Web services created by Infor- 
mation Server. 

IBM is staying true to its 
mainframe heritage by expand- 
ing Information Server's main- 
frame support with metadata 
management for IBM main- 
frame data sources, broadening 
change capture capabilities for 
the Information Management 
System, and introducing Virtual 
Storage Access Method replica- 
tion capabilities to help compa- 
nies host the same data on dif- 
ferent mainframe environments, 
Curry said. I 
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Canonical, maker of the Ubuntu Linux distribution, has joined the Lin- 
ux Foundation. Canonical executives said joining the foundation gives 
Ubuntu more authority and better communication in the open-source 
community. Amanda McPherson, vice president of marketing and 
developer programs for the Linux Foundation, said Canonical has been 
involved in the foundation for some time, attending summits and par- 
ticipating in Linux events . . . Green Hills ^^ 
Software achieved a Capability Maturity fp|*tH h ll Hills 
Model Integration (CMMI) Maturity Level 3 ■ * " ■ ' " " * " < ■ *' ■ 
rating. CMMI aids the definition and understanding of an organization's 
processes. Green Hills claims to be the first embedded provider to 
achieve CMMI Maturity Level 3, and said its customers can reduce 
schedule risk and development cost with Green Hills' CMMI-approved 
products . . . Open-source database management software provider 
Ingres has joined the Intel Software Program, a set of Intel services 
to help companies expand their sales reach through access to Intel 
resellers and end customers. Ingres executives said joining the pro- 
gram will help validate the value of its products, including the Ingres 
CAFE Java development environment. 



NEW PRODUCTS 



FRomiSEC 



Promisee, a server security specialist, has 
created an online encyclopedia of internal 
network security threats. The Internal Threat Encyclopedia ranks 
threats on a five-point scale, and is continually updated with detailed 
threat explanations. It is found at www.promisec.com/encyclopedia. 



UPDATES 



FarPoint Technologies, a provider of development components in Visu- 
al Studio .NET, Microsoft BizTalk Server and SharePoint Server, 
released a new version of its spreadsheet component for Visual Studio 
development. ASP.NET 4.0 offers new row edit templates, multiple 
row records and cell types, along with a Quick Start wizard to enable 
rapid prototyping . . . PHASE 2 International has launched SaaS 
source code control for Microsoft's Visual Studio Team Foundation 
Server. The PHASE 2 Hosted Team Foundation Server is available 
now with pricing starting at $US129 per month . . . WaveMaker 
released Visual AJAX Studio 4.0, the newest version of its open- 
source development product for building Web applications. AJAX- 
based mashups can be created with a Live Forms capability in version 
4.0, and there is a skin for the AJAX Dojo toolkit to provide a Mac-like 
look to Web applications, the company said . . . Eclipse technology 
provider Genuitec announced MyEclipse 7.0 Blue Edition IDE, which 
gives IBM WebSphere developers AJAX tooling, reporting and Eclipse 
3.4 platform interoperability. Version 7.0 integrates with Enterprise 
JavaBeans, the Maven 2 build manager and Spring IDE for MyEclipse. 
The product is expected to be available in October . . . Visual comput- 
ing technology provider NVIDIA added interoperability with 32- and 
64-bit Windows Vista and Mac OS X in version 2.0 of its CUDA C lan- 
guage programming environment for GPUs. The version offers new 3D 
textures and hardware interpolation for increasing the efficiency of 
such applications as medical volume reconstruction, the company said 
. . . HiT Software, a specialist in database replication and XML map- 
ping, has made automatic replication prioritization available in its 
DBMoto data replication engine. DBMoto 6.5 has a new log filtering 
capability, along with an option for noncritical data exclusion and repli- 
cation restart abilities, according to the company. 



PEOPLE 



Oracle tapped Jeff Epstein as CFO and executive vice president. He 
replaces Safra Catz, who held the position since late 2005. Catz will 
remain with the company. Epstein previously was finance chief of 
Oberon Media . . . Mike Bartlett has joined performance and avail- 
ability product maker Mazu Networks as vice president of sales. 
Bartlett previously served as a sales executive with Hewlett-Packard, 
most recently as a regional vice president of sales. I 



Embarcadero searches data models 

Meta data search tool makes models manageable 



BY ALEX HANDY 

When a government agency 
sought to remove what it 
thought was an offensive ethnic 
term from its approximately 60 
data models, Embarcadero 
Technologies' new ER/Studio 
Enterprise Portal caught its eye. 
The Web-based portal software 
generates reports and scans 
huge data models for specifics. 

In the case of the govern- 
ment's data models, the portal 
let developers and DBAs pin- 
point which columns' names 
and descriptions needed to be 
changed. Previously, said Jason 
Tiret, Embarcadero's director of 
modeling and design solutions, 
such a task might have been 
accomplished by pushing a data 
model into a SQL IDE and 
writing a long line of SQL code. 
But ER/Studio Enterprise Por- 
tal brings powerful search and 
reporting tools to this type of 
task in the company's ER/Studio 
data model repository. 

"It's a Web portal on top of 
our ER/Studio repository. 
ER/Studio is our data modeling 
tool. ER stands for Entity Rela- 
tionship. You use it to reverse- 
engineer Oracle, MySQL, DB2 
and Microsoft SQL Server data- 
bases. It would build a model 
for you, and you can put it in the 
repository. Multiple data mod- 
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Embarcadero's Web-based interface for searching data models lets 
developers search across large data sets for specific items. 



elers can work on these at the 
same time and put in defini- 
tions, or classify things by line of 
business. The portal allows oth- 
er developers, DBAs and busi- 
ness analysts to search that 
metadata," said Tiret. 

ER/Studio Enterprise Portal 
is available now in packs of 
licenses ranging from five users 
to 50. Five users cost US$6,000; 
50 users cost $25,000. 

The new portal also helps to 
keep reports based on data mod- 
els up to date, said Tiret. 
"ER/Studio has a lot of reporting 
capabilities. You can dump 



things to an Excel spreadsheet or 
as HTML. The drawback is that 
they're static. They come out of 
the model. Once the model 
changes, you need to regenerate 
the reports. 

"The portal really ensures 
everyone is coming to the single 
source of the truth." 

In the future, ER/Studio 
Enterprise Portal may add the 
ability to search through non- 
Embarcadero data model repos- 
itories, said Tiret. Until then, the 
company is focusing on tweaking 
usability and improving search 
functions. I 



JIVE GETS MORE SOCIABLE IN CLEARSPACE 



BY JEFF FEINMAN 

Jive Software has improved e- 
mail capabilities and created 
more of a social-networking 
atmosphere in its flagship col- 
laboration product. 

Clearspace 2.5, released in 
August, integrates with Sales- 
force. com to make business 
information, such as details 
from recent meetings or key 
contacts, more readily avail- 
able, Jive executives said. 
Users can participate in Clear- 
space collaboration projects via 
e-mail, mobile devices and 
external Web sites. Users can 
blog or create documents from 
their inbox or mobile device, 
according to the company. 

"Clearspace 2.5 introduces 
new ways for users to access 
communities from external sites, 
applications and platforms, mak- 
ing them able to participate 
wherever they may be," said 
Dave Hersh, CEO of Jive. 



Clearspace is an enterprise 
collaboration application that 
combines content creation tools 
with input from a community of 
users and project collaborators. 
It can interact with external 
customer communities, Jive 
said, and brings together Web 
2.0 attributes and traditional 
communications tools. 

In this version, administra- 
tors can extend communities 
into other Web pages by pasting 
a JavaScript snippet, the compa- 
ny said. That lets marketing and 
technical support teams moni- 
tor additional discussions. 

A new rich text editor makes 
text editing easier for users who 
lack training. It simplifies the 
addition of images and video, 
creation and editing of tables, 
and copying of files from 
Microsoft Word and Excel. 

The new version also pro- 
vides a global search and re- 
place of application terminolo- 



gy, so that companies can oper- 
ate with their own language. 
Administrators can configure 
the look and feel of Clearspace 
by changing color schemes and 
logos, Jive said. 

To put a focus on social net- 
working in its collaborative 
environment, Jive said it has 
created Twitter-like functionali- 
ty in Clearspace so that users 
can follow one another's activi- 
ties. There are search functions 
that let users find groups of 
people based on similar profile 
attributes, and users can create 
or join social groups based on 
similar areas of interest. 

"With enhanced search, you 
can instantly see results across 
content, people and places with- 
in the organization," Hersh said. 
"We've also made it easier to 
find people with specific exper- 
tise. Once you find the person 
you're looking for, you can add 
them as a connection." I 



a higher code: 



"If you want your GPS to 
alert drivers to real-time 
traffic conditions, you cant 



have software that 



shes." 



Baron Roberts, 
Dash Navigation 
Principal Engineer 



dash 



As the first GPS navigation system with two-way 
Internet connectivity, Dash has redefined the term 
"GPS" to mean "Get Places Sooner/* Dash Express 
provides real-time traffic information to drivers 
preventing costly and annoying delays, while 
en route to their destination , 

Wirh an aggressive schedule to ere ate and release 
this turting-edge technology* Dash called on u& 
to find a fast roure to high quality, secure code. 
As software development becomes increasingly 
complex, and time to market truncated* the integrity 
of the source code becomes increasingly vital. 

Code integrity, it J s the code we all live by. 
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MyEclipse 7.0 upgrades AJAX to first class 



BY ALEX HANDY 

It's never a good sign when a 
developer spends more time set- 
ting up a work environment than 
actually coding. Addressing that 
issue, Genuitec has carved out a 



niche as an enterprise Eclipse 
company, releasing packaged 
forms of the IDE at low cost and 
high usability. Version 7.0 of its 
MyEclipse platform, which 
rolled last month, adds 



JavaScript auto-completion and 
hand-holding for Maven users. 

Wayne Parrott, vice presi- 
dent of product development at 
Genuitec, said MyEclipse 
"takes the best of what's out 



there in the Eclipse ecosystem" 
and makes it work together. It's 
available at US$30 to $150 per 
year, per developer. 

Version 7.0 pulls in the 
JavaScript Development Tool 



More time develop 
Less time 



Managing* Configuring 



Fully managed, hosted version control software 



* Full integration with Visual Studio and Eclipse 

• Compatible with Windows Mac and Linux 

* Advanced security with database encryption and SSL 

• High performance access 
■ Powered by world class Bell data center 





Free 4-userSourceAny where Hosted 

full edition is available at iM'Jfcffli^^MOTi^^JidtJ 



DynamsofL 

The leading developer of Version Control and IssueTracking software 
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(JSDT). This complement 
to the existing JDT adds auto- 
completion and related time- 
saving features. JSDT also 
includes refactorizations, though 
Pete Carapetyan, project man- 
ager at Genuitec, was quick to 
point out that these are still 
strictly version 1.0. 

"Java has always been a first- 
class citizen, [but] even with the 
power of Web 2.0, JavaScript has 
always been a second-class lan- 
guage," Carapetyan said. "In 
Java, you have content assist. You 
can write any Java file in the edi- 
tor, and you get first-class sup- 
port all the way. JavaScript is 
more like a text editor. [With 
Ganymede,] for the first time, 
JavaScript is a part of the JDT 
It's now becoming a first-class 
language inside of Eclipse." 

SMARTER MAVEN 

Another newcomer to My- 
Eclipse 7.0 is Maven. "Our loyal- 
ty begins with our existing build 
structure," said Carapetyan. 
"Maven is a very broad and capa- 
ble tool set, but that's a political- 
ly correct way of saying it's all 
over the place. Our users are just 
trying to get things done. They 
have a specific type of project 
they're trying to complete, so we 
tailored Maven to work with our 
existing project structure. 

"Maven is extremely difficult 
to learn in the first couple of 
days... there are some legal 
restrictions that make it tough to 
bring in certain JARs. It's like, 
'Welcome to Maven! Now jump 
through these hoops. If you suc- 
ceed, maybe tomorrow you'll be 
able to do a build.' When you 
install MyEclipse and Maven, it 
takes care of a number of diffi- 
cult steps that most developers 
had done by hand for years." 

Genuitec also offers a Web- 
Sphere-tailored version of 
MyEclipse known as Blue. This 
version is targeted at users of 
Rational Developer Tools. Par- 
rott said the next version of 
MyEclipse will support UML 
2.1 and will let Rational Appli- 
cation Developer users import 
and export compatible dia- 
grams between Rational and 
MyEclipse. 

Also on the list of upcoming 
features are new JavaServer 
Faces components from ICE- 
Faces, an update to Sun's 
Matisse GUI developer and 
new tools for building iPhone 
applications. I 
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Nexus manages Maven repositories 



BY ALEX HANDY 

Now that Java users are accus- 
tomed to Maven, the points of 
pain are beginning to get relief. 
To help save time and effort 
for organizations with lots of 



Maven users, Sonatype released 
Nexus 1.0. The Web-hosted 
repository management tool 
brings the many external and 
internal libraries used in devel- 
opment environments down to 



a single point of management. 

Jason van Zyl, founder and 
CTO of Sonatype, said Nexus 
and the company's other proj- 
ects have all come out of the 
needs he's seen in Maven envi- 



ronments. Van Zyl is the creator 
of Maven, and he founded 
Sonatype after his initial 
attempt at building a Maven 
support company failed. 

Sonatype has joined the 




Eclipse Foundation and has 
built integrations with other 
Eclipse projects. Nexus, though 
new, is already on its way to 
becoming a part of how the 
Eclipse build system works with 
OSGi bundles. 

For now, however, Nexus is 
still a free way to manage 
Maven repositories. 

"Anyone who builds with 
Maven may have a number of 
internal and external reposito- 
ries. [They may be] fetching 
things from Apache or Eclipse or 
JBoss repositories. Nexus helps 
people manage all of their 
Maven repositories from one 
spot," said van Zyl. "People 
might have incorrect metadata 
or not take care of repositories. 
Nexus can fix that." 

When Nexus is installed in a 
network, it takes the place of 
previous Maven management 
systems. "Maven developers 
internally would basically be 
only looking at Nexus," said 
van Zyl. 

"It's also great for configura- 
tion management," he added, 
stating that repositories can be 
taken out of build usage, with- 
out being taken offline. That 
saves developers from being 
left out in the cold when man- 
agement wants to keep official 
builds from using experimental 
repository artifacts. 

Nexus is a free and open- 
source project. It is available at 
nexus.sonatype.org. I 

ALTOVA XML EDITOR 
KEEPS IT SIMPLE 

BY DAVID WORTHINGTON 

Sometimes less is more. A Web 
services tool maker has fielded 
an entry-level XML editor for 
basic editing tasks. 

Altova has made XMLSpy 
2008 Standard Edition generally 
available for US$149. The editor 
can be used for viewing and vali- 
dating Document Type Defini- 
tion, XML, XML Schema, 
XQuery and XSLT files, as well 
as for performing basic editing 
tasks on CSS and HTML files. 

Some of its capabilities are 
code completion, indenting 
XML files for readability, line 
numbering, and source folding 
and syntax coloring for easier 
navigation. It includes well- 
formedness checking and other 
XML validation features. 

Users may look at files in a 
grid view or in a graphical XML 
Schema View to visualize data 
according to the document's 
hierarchical structure. I 
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Intel offers certification as a service 

Chipmaker teams with SpikeSource to help ISVs develop multicore apps 



BY ALEX HANDY 

In April, Intel and SpikeSource 
began to offer platform certifica- 
tion as a service. Now, with the 
announcement that 100 soft- 
ware companies have already 
signed up, the partners have 
brought their effort out of the 
shadows, showing that their 
vision of certification as a service 
can work and saying that it will 
eventually become available to 
enterprise developers. 

Jamshed Patel, vice president 
of alliances at SpikeSource, said 
that this is the first major certifi- 
cation as a service program 
offered by a major technology 
company. 

"Intel is pursuing a strategy to 
enable thousands of ISVs to be 
enabled on Intel technologies. 
To make this possible in a scal- 
able way, Intel needs a highly 
scalable platform that can reach 
out in a programmatic way and 
enable ISVs to be certified on 
these technologies," said Patel. 
"We rolled out the SpikeSource 
Solutions Factory Platform to 
enable ISVs to develop applica- 
tions in a way that promotes scal- 
ability on Intel's platform. At the 
end of the process, they receive 
an Intel badge." 

STACK TRACKER 

By day, SpikeSource, which is 
funded by Intel Capital, sells a 
service that tracks the evolution 
of open-source software stacks. 
The company keeps a watchful 
eye on projects, scanning for 
updates, bugs and changes, 
then notifies subscribers of 
them. Intel built its certification 
platform atop software stacks 
maintained by SpikeSource. 

Perhaps the most useful 
aspect of certification as a ser- 
vice is the ability of the plat- 
form to certify applications on 
multicore processors. The pro- 
gram automatically evaluates 
application dependencies and 
coding to determine whether or 
not the software is up to snuff 
on current and next-generation 
Intel hardware. For US$25,000 
a year, ISVs can push their 
applications through the certifi- 
cation process, then offer their 
software as Intel certified, pro- 
vided it passes muster. 

Patel said NEC and Syman- 
tec are among the ISVs current- 
ly using the service. He predict- 
ed the future of certification as 



a service would include many 
vendors, both large and small. 

And while the service is cur- 
rently offered only to ISVs, 



Patel foresees an enterprise 
version. 

"That's a future product 
direction, yes," said Patel when 



asked about enterprise certifi- 
cations. "We have had a lot of 
interest from enterprises, both 
in the past and currently, in the 



platform. There may be a point 
in time when they may be able 
to more directly access these 
services." I 



Intellectuals solve problems. 
Geniuses prevent them. 



— Albert Einstein 
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SharePoint scores with Web developers 



BY DAVID WORTHINGTON 

Microsoft has forecast that 
SharePoint will hit US$1 billion 
in revenue for 2008, and some 
analysts are predicting it will 
steamroll the Web 2.0 market. 
The softwares use for creating 
Web applications is drawing 
enterprises to use SharePoint as 
a development platform, accord- 
ing to several analysts. 

SharePoint is a boon for 
Windows shops. The platform 
leverages the Microsoft stack 
that many have already paid to 
license, and developers do not 
need to purchase additional 
software for development. Fur- 
ther, it lets developers use their 
existing .NET programming 
skills to develop Web applica- 
tions, and it provides timesav- 
ing, prebuilt components. 

The platform s growing popu- 
larity and the subtle differences 
between SharePoint and ASP. 
NET development are com- 
pelling Microsoft to invest in 
guidance to bring developers 
up to speed. The company's 
patterns and practices group 
has begun to write guidance for 
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Visual Studio lacks a GUI editor for creating Web parts. 



working with SharePoint APIs 
and building applications, said 
Paul Andrew, senior technical 
product manager for SharePoint. 

SharePoint gives developers 
a lot of functionality for building 
Web applications out of the box 
that they would otherwise have 
to build themselves, said Ryan 
Thomas, SharePoint practice 
director at Syrinx Consulting. 

At a lower level, SharePoint 
has facilities for data access and 
list management built in; devel- 



opers do not have to change 
database schema or write store 
procedures for SQL Server, 
Thomas said. Additionally, its 
Collaborative Application Mark- 
up Language makes it possible 
to run data queries without 
"cracking open Visual Studio," 
resulting in significant time sav- 
ings, he said. 

"Developers get the speed of 
prebuilt plumbing," Thomas said. 
"Microsoft has run QA over it, 
and the CRUD [create, read, 



update and delete] operations are 
built into the quality life cycle. 
There are standard data access 
operations against SharePoint 
lists; you don't have to spend 
nearly as much time testing." 

Another timesaver is that 
SharePoint lets business users 
control page layout, whereas 
with an ASP.NET website, 
developers have to write cus- 
tomizations for that to happen, 
said Lou Franco, a SharePoint 
engineer at document imaging 
component maker Atalasoft. 

Franco noted that SharePoint 
development is slightly more dif- 
ficult than standard ASP.NET 
development because Web parts 
are hand-coded in the absence of 
a GUI designer from Microsoft 
within Visual Studio. 

Developers write applica- 
tions fundamentally the same 
way they would write ASP.NET 
applications. That is "almost a 
slam dunk for efficiency," lever- 
aging existing .NET develop- 
ment skill sets, Thomas said. 

With those skills, developers 
can extend what comes out of 
the box. SharePoint offers a con- 



sistent menu structure, UI navi- 
gation and user interface for 
developers to extend rather than 
build those elements them- 
selves, said Microsoft's Andrew. 

Applications use SharePoint's 
existing memory pool and securi- 
ty settings. Building applications 
within one program eliminates 
the likelihood that a single appli- 
cation would go down because it 
got out of date with the IT infra- 
structure, Andrew said. 

In a January report, Forrester 
analyst G. Oliver Young predict- 
ed that Microsoft SharePoint 
would "steamroll" the Web 2.0 
market and that IT departments 
taking a leadership role in enter- 
prise 2.0 deployments would 
look at SharePoint first. 

As developers catch on to 
SharePoint, Microsoft is catch- 
ing up with developers. 

"When [SharePoint] first 
came out, things were not 
scaled for its growth," Andrew 
admitted. "If Microsoft is good 
at anything, [however,] it is 
coming back to try again, 
work harder and harder." The 
continued on page 20 ► 
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Test package shuns business transaction bottlenecks 



BY JEFF FEINMAN 

Testing company Shunra Soft- 
ware has created a testing 
package that uses a mix of 
automated and manual time 
tracking to reduce the time 



required to pinpoint business 
transaction bottlenecks. 

The VE Application Perfor- 
mance Analysis Package tests 
applications in a "real world" 
environment and identifies 



business transactions with per- 
formance issues — such as 
extended transaction response 
times, network bandwidth bot- 
tlenecks and client or server 
delays — to analyze how the 



problems might be mended. 

Shunra's product lets users 
manually track transaction time 
or automate timing via integra- 
tion with third-party test tools 
such as HP's LoadRunner or 



NetAdvantage* for .net 
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. intelligence. In the past year, ProfitBase also decided to use Microsoft Windows Presentation 

^^yQ Foundation for many of the more graphical parts, including navigational menus, within the 

application. The company needed to frnd a solution to create consistent user experiences across 
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Rugland, CTQ and VP of Development at ProfitBase. 
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Borland's SilkPerformer. When 
a test is completed, it can indi- 
vidualize every application 
action, or "turn," in a transac- 
tion to isolate delays and bottle- 
necks, the company said. 

For tests involving trans- 
mission control protocol (TCP) 
data, the Shunra package will 
analyze the packet data to 
determine the effects of the 
TCP window size on transac- 
tion performance. 

Automated packet captures 
are recorded as a test is running 
to provide data for the post-test 
analysis. Automated analysis 
tools yield information on the 
behavior of a transaction based 
on its packet flows. This capa- 
bility can reduce problem dis- 
covery time from weeks to 
hours, Shunra claimed. 

The VE Application Perfor- 
mance Analysis Package is 
offered in a desktop enterprise 
version or as an add-on to 
Shunra's Virtual Enterprise net- 
work simulation suite. It com- 
prises four main components, 
which can be used individually 
or in tandem: WAN emulation, 
transaction timing, packet cap- 
ture and the VE Analyzer. 

David Berg, a product man- 
ager with Shunra, said users 
who don't want to tap the 
product's analysis capabilities 
could still integrate WAN emu- 
lation into the testing process. 
"One specific example is for 
customers using HP's Load- 
Runner to test their applica- 
tion performance," Berg said. 
"By adding WAN emulation to 
their test environment, they 
can understand the true appli- 
cation response times at their 
remote sites." 

TIME SAVER 

When asked what makes the 
VE Application Performance 
Analysis Package different from 
other testing tools, Berg said 
other products currently offer- 
ing application analysis typically 
produce more data, but at a 
cost. "Using other solutions 
takes highly trained staff days 
or weeks to generate the same 
analysis," he claimed. "Other 
solutions may provide more 
data, but Shunra provides the 
highest- value data in a fraction 
of the time." 

He said VE Application Per- 
formance Analysis Package is 
highly automated and requires 
less than a day of training. I 



www.sdtimes.com 



Software Development Times . September 15, 2008 . 



NEWS 



15 



DevExpress reporting controls engage end users 



BY DAVID WORTHINGTON 

Developer Express has 
released XtraReports Suite 
Version 2008 vol 2, a collection 
of WinForms and ASRNET 
reporting libraries. 

The new version of the suite 
introduces a report parameter 
feature that lets end users modi- 
fy parameter values before a 
report is generated. The cus- 
tomization dialog can be invoked 
at any time while previewing the 
report, and the report is then 
regenerated. Developers create 
the parameters. 

Developers may also substi- 
tute property names with phras- 
es meaningful to end users. 

The company is providing 
localization options for its 
Property Grid, a list of items 
that can be changed in the 
product, including property 
and control names. 

DevExpress does not provide 
language support, said Julian 
Bucknall, the company's CTO. 
Instead, developers can convert 
an XML resource file into their 
own language by using Visual 
Studio to change a string, then 
recompiling, he said. Customers 
have donated some translations 
(tinyurl.com/3nj588). 

In this release, ordinary data 

WRAPPING C 
IN SNAKESKIN 

BY P.J. CONNOLLY 

Although Python is still seeking 
traction among developers, one 
company sees value in bringing 
its line of numeric analysis tools 
to the open-source language. 

Visual Numerics announced 
the release of its Python wrap- 
pers for the company's IMSL C 
Numerical Library in August. 
The PylMSL wrappers, which 
let Python applications access 
code in the IMSL C Library 
DLLs or in other shared 
libraries, join the company's col- 
lection of interfaces for native 
C, Fortran, Java and .NET Cus- 
tomers of the IMSL C Library 
will get the PylMSL wrappers 
at no extra cost, according to the 
announcement. 

The wrapper approach lets 
developers prototype an applica- 
tion in Python, then render it in 
C/C++ for production, using the 
same mathematical and statisti- 
cal algorithms. That can cut 
development costs and time-to- 
market, Visual Numerics said. I 



fields may be converted into 
calculated fields. Developers 
can add calculated fields to data 
sources and build formulas to 
be used for value calculations. 
Once a field is set up, it can 



be used anywhere across 
reports, according to Developer 
Express. 

Running sum and percent- 
age summary types are now 
available to provide cumulative 



values. XtraReports allows 
developers to specify whether 
that should continue across all 
pages or be reset with each new 
data group or page. 

XtraReports works with both 



Visual Studio 2005 and Visual 
Studio 2008. Existing customers 
can upgrade for US$199.99 
(with full source code); regular 
pricing is $499.99, also with full 
source code. I 




Altova' XMLSpy ' 2008 is the world's best-selling XML development environment for modeling, editing, 
transforming, debugging, and profiling all XML technologies. Download a free trial todayl 



• Support for very large XML files 

• Detailed find & replace in XML Schema editor 

• Enhanced X5LT details in Info Window 

• XSL Outline entry helper 

• Visual Studio support updated for VS 2008 

• Support for Java, C#, JavaScript, and 
VBScript in stylesheets 

• And much more... 



Hew* 



XMLSpy provides unsurpassed compliance with the 
latest industry standards, it even supports the new 
Office Open XML (OO XML) formats utitized by 
Microsoft* Office 2007, The advanced functionality 
in XMLSpy Is coupled with user-friendly views and 
entry helpers, wizards, and debuggers, helping 
developers create, edit, and optimize today's most 
advanced XML-based applications and Web services 
with ease. 



• XML editor 

• Graphical XML Schema / DTD editor 

• XSLT 1 .0/2.0 editor, debugger, profiler 
» XQuery editor, debugger, profiler 

• XPath 1 ,0/2.0 analyzer & builder 

• Relational database support 

• Advanced XML validation features 

• Support for Office Open XMLfiles 
(.docx, xisx, pptx) 

• SOAP client & debugger 

• Graphical WSDL editor 

• Java, C#> C++ code generation 

• Text-based and graphical editing views 

• Visual Studio & Ecfipse integration 
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See why XMLSpy is the choice of over 3 million top developers — 
Download a free, 3 IKS ay trial at www .altovaxom 



Announcing 




SPTechCon 

The SharePoint 
Technology Conference 



January 26-28, 2009 

Hyatt Regency 
San Francisco Airport 

Burlingame, CA 




Are you new to SharePoint? 

Have some experience, but are looking for more? 

An expert looking for advanced skills? 



If you answered "yes" to any 
of these questions, then 
SPTechCon is for you! 



PRODUCED BY 

BZ Media 



»tmVM||Mi:-V-ni.ia.'a 








Register by 
Oct. 17 for the 

extreme 
Early Bird Rate 




Tom Rizzo, 

Director of Microsoft SharePoint, said: 
"The phenomenal uptake of 
Microsoft Office SharePoint Server 
is transforming organizations of all 
sizes, all industries and all geogra- 
phies. Business leaders are envi- 
sioning new uses of SharePoint, 
and IT professionals and developers 
are gearing up to implement new applications as well 
as integrate SharePoint to other enterprise software. 
This is creating significant demand for training and 
education. We're delighted BZ Media is introducing 
this new SharePoint technical conference." 




What's at SPTechCon for IT professionals? 

SharePoint is way more than a collaborative corporate portal. But now everyone wants to leverage it for document management, 
business process management and corporate compliance. At SPTechCon, you'll learn best practices for managing a SharePoint 
environment and integrating it with other systems to unleash the full power of the software— and your company! 

What's at SPTechCon for business managers and analysts? 

SharePoint can bring great efficiencies to businesses, through the creation of line-of-business applications such as those used in 
human resources and order entry departments. SPTechCon features a heavy slate of classes to teach how to take full advantage 
of SharePoint, from business intelligence tools to reporting and much more. 

What's at SPTechCon for developers? 

SPTechCon offers a deep dive into the architecture, and provides practical classes on such SharePoint-centric features as Web parts, 
lists and pages. You'll learn how to create applications for SharePoint that solve real business problems, and also see what kind 
of third-party applications have already been created to run on top of SharePoint. 

For more information, go to 

www.sptechcon.com 
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Beta controls illuminate Silverlight 2 



BY DAVID WORTHINGTON 

Although Silverlight 2 is not yet out the 
door at Microsoft, a component maker 
has already created a suite of controls 
that leverages it. 

Intersoft Solutions has unveiled beta 
versions (sirius2.intersoftpt.com) of "Sir- 
ius 2," the code name for a suite of com- 
ponents built with Silverlight 2 beta 2. 
The betas include a cover flow-style view- 
er and fisheye-style menu that functions 
as a docking-style navigation control. 

Intersoft describes WebCover- 
Flow.NET, its cover flow control, as a 
Web-based multimedia viewer. But the 
company notes it could also be used in a 
business application to present employ- 
ee data, because it supports data binding 
and templates. 

Intersoft's fisheye control for Sil- 
verlight 2, WebFishEye.NET, offers 
data binding and item template capa- 
bilities. The company suggests it could 
replace conventional navigation items 
such as icons, text links and tree views. 

The controls comprise WebAqua.NET 
2.0. Web Aqua mimics the "dock" feature 
of Mac OS X Leopard; icons are displayed 
within a 3D dock, and items can expand 
into stacks. WebAqua.NET will be bun- 
dled in Intersoft's upcoming WebUI Stu- 
dio.NET 2008 R2 component suite. 

Intersoft also released a beta of 
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WebCoverFlow.NET is a multimedia viewer that has data binding capabilities. 



WebUI Studio.NET 2008 R2. It provides 
two assemblies for WebAqua.NET — in 
ASP.NET and Silverlight 2 — which share 
a common code base. Microsoft Visual 
Studio 2005 or 2008 is a prerequisite for 
the ASP.NET version; the Silverlight 2 
version requires the June preview of 
Expression Blend and Visual Studio 2008 
with the Silverlight 2 toolkit installed. 

WebUI Studio.NET also updates 
WebScheduler.NET (a calendar compo- 
nent) and introduces an accessibility- 
compliant data grid. WebScheduler.NET 



provides more control over its new event 
editing form and adds new timeline 
views for events. 

Finally, WebGrid.NET Enterprise has 
been made Section 508 compliant. Sec- 
tion 508 is a U.S. law that requires feder- 
al agencies to make their electronic and 
information technology accessible to peo- 
ple with disabilities. Intersoft says Web 
applications can be made 508 compliant 
without breaking existing functionality. 

The control also has new shortcut 
keys for selecting multiple rows. I 



READINESS MANAGER 
ROLLS FOR JAVA CODE 

BY DAVID WORTHINGTON 

A code analysis tool maker has devel- 
oped a solution that lets software devel- 
opment managers assess code readiness 
before releasing software. 

Coverity Software Readiness Manag- 
er, based on technology that Coverity 
acquired from Solidware, provides code 
intelligence about such readiness factors 
as architectural integrity, code complex- 
ity, interdependencies, test coverage and 
violation of Java best practices. 

The solution aggregates data from 
multiple sources and tools and corre- 
lates its results into a dashboard display 
that drills down from the product to the 
package level. Readiness Manager col- 
lects 28 metrics. Thresholds for the 
dashboards indices are determined by 
industry standards but may be config- 
ured to fit the code base it is analyzing.. 

Readiness Manager integrates with 
Coverity Prevent static analysis. 

Coverity will create on integrations 
for third-party products and add data 
sources based on customer feedback, 
said CTO Ben Chelf. Language cover- 
age will extend to C/C + + in a later ver- 
sion. Pricing begins at US$8,750 and fol- 
lows a staggered per line of code/per 
year model. I 
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Redefining the User Experience 

PEG® GUI Development Tools 





A family of portable graphics 
software for designing a high 
performance GUI for any 
embedded device. 



• Completely customizable 

• Multi-lingual support 

• High color depth support 

• Small footprint 

• Fast execution speed 

• Designed for cross platform 
application development 
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Bluenog merges Bl, content management 



BY ALEX HANDY 

Three former BE A employees hope to 
make a dent in the enterprise portal mar- 
ket by bringing tasks together. Bluenog 
today is expected to release version 4.0 of 
its ICE platform, which includes content 
management, business intelligence soft- 
ware and a Web portal, all in one. The 
idea is to outpace the competition by pro- 
viding three highly integrated solutions to 
common enterprise problems. 

Scott Barnett, co-founder and COO of 
Bluenog, said that the biggest advantage 
for his users is the time they save on inte- 
grating all three solutions. Most compa- 
nies with a content management system 
find they have to integrate third-party 
business intelligence software or drag an 
existing portal into an incompatible Web 
infrastructure, said Barnett. He said his 
two-and-a-half year old company has 
leveraged open source to keep the prod- 
uct price low, to US$25,000 per year. 

Barnett said Bluenog can be used to 
consolidate the resources needed to 
deploy internal Web-based or service- 
based applications. Such software not 
only can be developed using Bluenogs 
workflows, but also can be tracked into 
deployment and a standardized approval 
process, then monitored and reported 
on with Bluenogs integrated business 
intelligence tools. 
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Bluenog's enterprise portal encompasses content management and business intelligence. 



Those reports can be put out in a vari- 
ety of forms, from Excel spreadsheets to 
more formal reports for management. 

"There's a unified framework that con- 
solidates security, adminstration and 
deployment of applications," Barnett 
said. "There's one administrative console. 
As you're deploying applications, you do 
it all from one place. You can serve con- 
tent natively in the portal. Reports can be 



stored seamlessly in the CMS." 

Despite this integrated approach, 
Bluenog does play well with others, he 
said. "Our core message is: Do not rip 
out what you have; just put in AIS for 
the parts you need." 

Bluenog runs on Java virtual 
machines version 1.5 or higher. It has 
been tested on Linux (both Red Hat and 
SUSE), Mac OS, Solaris and Windows. I 



LAW CENTER ADVISES 
ON GPL DO'S, DON'TS 

< continued from page 1 

distribute fully independent, proprietary 
programs, developed from scratch, which 
are designed to run on the FOSS operat- 
ing system but do not combine with, link 
to, modify, or otherwise derive from the 
GPL'd components. In the latter case, 
where the work is unquestionably a sepa- 
rate work of creative expression, no deriv- 
ative work has been created." 

Yet despite the clear-cut nature of 
such a scenario, many companies aren't 
sure where the line between "must 
redistribute" and "wholly owned and 
proprietary" is. 

The SFLC writes that in many cases, 
engineering teams are unable to track 
the contents of a binary back to its ori- 
gins, and thus lose track of where GPL 
software is being used in a project. This 
can occur when the building of a project 
is left to an individual or a small team. 

"Knowledge centralization not only 
creates engineering redundancy issues, 
but it also endangers GPL compliance, 
which requires you to provide build 
scripts," according to the guide. 

"A Practical Guide to GPL Compli- 
ance" is available for free online in both 
HTML and PDF forms at .software 
freedom.org/resources/2008/compliance 
-guide.html. I 
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SharePoint scores for development 



< continued from page 12 

company will add further sup- 
port and development re- 
sources to SharePoint to handle 
the increased growth, he said. 

But SharePoint may have 
grown up too fast. "SharePoint 



has bloat," said Syrinx's Thomas. 
"It is a large application with a 
lot of moving parts, and is not 
written as efficiently has 
Microsoft could have [written 
it] under the covers." He cited 
SharePoint s inclination to load 



unnecessary image and Java- 
Script files. 

While a developer might 
build a small application in a 
simpler way, SharePoint is a 
large application with more 
functionality, argued Micro- 



soft's Andrew. 

That very functionality, how- 
ever, may permit developers to 
write sloppy code for Web parts, 
such as calling a database twice 
to find an item in a SharePoint 
list, Thomas cautioned. ".NET 
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0r Data Visualization Consulting 



You know you need a digital dashboard now what? 

Look To Dundas Consulting For Unmatched Expertise In Building Custom Dashboard Solutions 

Let Dundas Consulting work with you or your development team to create a complete digital dashboard application, custom tailored 

to your needs. We are experts in the data visualization field and can build executive dashboards for any vertical. Dundas Consulting is 
focused on getting you the results you seek while saving you time, frustration and money- 

Dundas makes award -winning data visualization software used by Fortune 500 companies around the world. Let us employ our 
industry-leading ASP.NET, Reporting Services and SharePoint components into your digital dashboard - we'll help you tell The right 

story with your data- 

Visit www.dundasconsultmg.com to see our full "dashboard portfolio" gallery and online interactive demosL Remember, every 
company is different. Choose a custom solution and view your KPIs in a manner that best suits your business* Dundas Consulting can 

work with your team to show you how! 




makes it easy for a programmer 
to get sloppy because everything 
is so readily available for you." 

Atalasoft s Franco noted that 
it's possible to write bad code in 
any system. "It is the responsi- 
bility of the developer to under- 
stand how to manipulate Share- 
Point lists and [to realize that] 
that many objects they build [in 
SharePoint] are not disposable. 
They cannot rely on .NET's 
garbage collector," which Share- 
Point uses. 

The next version of Visual 
Studio will bundle tools for 
SharePoint, Andrew said. He 
said Microsoft would announce 
its road map for SharePoint 
developer tools around its Pro- 
fessional Developers Confer- 
ence at the end of October. I 

Desktop tools test 
mobile Web apps 

BY ALEX HANDY 

Testing Web applications on 
mobile devices can require a lot 
of thumb work. For developers 
building software to run across 
multiple types of phones and 
vendors, figuring out what flies 
and what dies is half the battle. 
Keynote Systems claims to alle- 
viate this headache with its 
Mobile Interactive Testing 
Environment (MITE). 

The suite of desktop-based 
testing software can pass 
mobile Web content through 
1,100 phone profiles and log 
the results, Keynote said. 

Nisheeth Mohan, product 
manager for mobile technolo- 
gies at Keynote, said the suite is 
the company's first foray into 
the mobile testing market. 
"Developers have a big chal- 
lenge when it comes to writing 
code and preparing content on 
mobile sites," said Mohan. 
"They have to support hundreds 
of devices on the market. A site 
might look nice on one, but not 
render so well on another." 

Thus, MITE runs Web con- 
tent through a 1,100 simulated 
phones, from Motorola to 
Nokia, LG to BlackBerry. One 
absent profile is the iPhone; 
that's because it "has a real 
browser" and "downloads regu- 
lar Web content," rather than 
content built specifically for 
mobile devices, Mohan said. 

MITE runs on Windows and 
is available in a free 15-day 
trial. A single user license costs 
US$ 1,500 for one year. I 
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Microsoft licenses now accommodate Hyper-V 



< continued from page 1 

integrating visualization to 
simplify deployments, increase 
system flexibility, boost usage 
rates and increase portability 
of the applications." 

The licensing changes apply 
to 41 server applications, 
including Dynamics CRM 4.0 
Enterprise and Professional 
editions, Exchange Server 2007 
Service Pack 1 Standard and 
Enterprise editions, Office 
SharePoint Server 2007, SQL 
Server 2008 Enterprise edition, 
and System Center products. 

"Microsoft is basically bring- 
ing itself in line with other virtu- 
alized licensing practices in the 
industry," said Bola Rotibi, prin- 
cipal analyst with Macehiter 
Ward-Dutton. "It makes more 
sense to enable customers to 
manage licenses more produc- 
tively and easily; anything that 
makes implementing virtualized 
systems easier is a good thing." 

The company has also 
realigned its support policies to 

SURVEY: RISE 
OF THE ANALYST 

< continued from page 1 

modeling." 

Ideally, the business analyst 
will act as a conduit of commu- 
nication between the business 
subject matter expert and the 
IT organization. However, the 
survey found that 35% of ana- 
lysts are now involved in 
requirements and project man- 
agement, and 30% handle parts 
of requirements and testing. 
Further, 76% of survey partici- 
pants said they manually trans- 
late requirements to test cases; 
Lanowitz said this shows that 
business analysts spend a signif- 
icant amount of time in testing. 

The enterprise needs to 
evolve the role of the business 
analyst into something similar 
to a production manager in 
commercial software compa- 
nies, Lanowitz said, since enter- 
prises rarely invest in proper 
tools and training for business 
analysts. This would help solve 
the traditional problems of 
aligning the business with IT. 

"Business analysts are clear 
in the types of dynamic func- 
tionality they need in their tools 
and how the tools need to work 
together at key intersection 
points in the life cycle, such as 
requirements definition and 
test," Lanowitz said. I 



the same end. It will now pro- 
vide technical support for 31 
products when they are 
deployed on Windows Server 
2008 Hyper-V, Windows Hyper- 
V Server or any "validated" 
third-party virtualization plat- 



form. More information is avail- 
able on Microsoft's support Web 
page (support.microsoft.com). 

Microsoft launched a pro- 
gram called Server Virtualiza- 
tion Validation in June. To date, 
Cisco Systems, Citrix Systems, 



Novell, Sun Microsystems and 
Virtual Iron Software are par- 
ticipating in the program, 
according to Microsoft. 

Also in June, the company 
shipped Hyper-V, its hypervi- 
sor-based virtualization system. 



Hyper-V can be used to test 
applications and plan future 
consolidation, business conti- 
nuity, and high- availability proj- 
ects, according to Microsoft. It 
requires a host running the 64- 
bit version of Windows Server 
2008, as well as hardware fea- 
tures that enable virtualization 
and data execution protection. I 
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StorageCraft ShadowProtect 
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by StorageCraft 

Create, edit or restore backup images on as 
many servers, desktops and laptops as needed. 
Create online or cold state backups in minutes, 
no software installation required. StorageCraft™ 
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bare metal recovery in minutes. ShadowProtect 
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bootable Windows environment to create and 
restore compressed and encrypted backups, 
no software installation required. 
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"Bottom line: dtSearch manages a terabyte of 
text in a single index and returns results in 
less than a second. " — InfoWorld 
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VMware Management 
& Automation Bundle 

VMware Virtual Datacenter 
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With unparalleled performance and sophistication, 
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and enterprise-wide database applications. 
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Telerik RadControls 

by Telerik 

Add grid, combo, editing, navigation and charting 
functionality to your AJAX and ASP.NET projects. 
RadControls for ASP.NET enhances your Web 
applications by adding AJAX functionality to your 
ASP.NET projects. The suite takes full advantage 
of the features included in Visual Studio 2005. 
RadControls for ASP.NET helps developers deliver 
feature-rich, standards-compliant (WAI-A, WCAG 
1.0, XHTML 1.1) and cross-browser compatible 
Web applications, while significantly cutting 
their development time. RadControls for ASP.NET 
includes: RadEditor, RadTabstrip, Radlnput, 
RadCalendar, RadUpload, RadWindow, RadAjax, 
RadGrid, RadCombobox, RadMenu, RadSpell, 
RadChart, RadTreeview and more. 
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flgc of Ubiquity 

he mobile application deployment platform of the future is the always-connected device 











few years ago, we knew exactly what the 
future of mobile computing software devel- 
opment would be like. It would be powered 
by Wireless Application Protocol, a set of 
specifications designed to provide low- 
speed wireless devices with limited screen 
space, with a means to access information and to communicate 
and interact with Web services via WAP gateways that bridged the gap 
between telephony networks and the Internet. 
We were naive. 

Today, with 3G, 802.11g/n and Mobile WiMax (802. 16e) wireless networks, 
mobile devices have access to TCP/IP network speeds above lOOMb/sec. The 
devices of 2008 are as powerful as the PCs of only a few years ago. 
Apples iPhone, for example, has a 620MHz ARM processor with 128MB of 
RAM and up to 16GB of flash memory running Mac OS X. As John Sullivan, man- 
ager of operations for the Free Software Foundation, said of Apples closed develop- 
ment system, "The iPhone is not a 'phone' any more than my laptop computer is a 
phone. The iPhone can make phone calls, but so can my laptop. I could call your phone 
using my voice-over-IP system, and you wouldn't know the difference. I can even put a 
card in my laptop that enables communication over a cellular network." 

The same is true of other mobile devices. While they're not quite the same things as 
PCs, many of them have all the power of a computer from a few years ago. Other devices — 
such as Nokia's N810 Internet Tablet and Intel Atom-powered netbooks like the Asus EEE 
901, MSI Wind NB U100 and Acer Aspire One — completely blur the difference between PCs 
and mobile devices. 
This is not a small matter. According to Juniper Research, "The global market for Mobile 
Web 2.0 will be worth US$22.4 billion in 2013, up from $5.5 billion currently." 
What's a developer to do? 

WEBKIT GAMBIT 

Many are convinced that the time for WAP or specialized runtimes is over. Instead, they see 
WebKit — the open-source browser engine used by Apple, Google and Nokia, among others — as 
tomorrow's platform for mobile development. In fact, Ben Smith, founder of WMP Systems, a 
small mobile application development company, said that he's "betting the company" on it. 

"My company makes two business products," Smith said. "In both cases, we have created a mobile 
version for Web Kit-based browsers. We call it the iPhone-optimized version, but it's designed for a 
screen resolution, not a device, so it will work perfectly when [Google's] Android comes out." 

Smith is convinced that "WebKit is the advanced mobile platform. Opera keeps saying they are 
going to release a version of Opera Mobile that competes, but it keeps getting pushed into the future." 

Andrew Finkle, principal at software consultancy afpr.com, put it more bluntly: "WAP is dead. 
The iPhone and Skyfire browser are the first death blow." 

Finkle believes "the change in focus is a result of a confluence of continued on page 24 ► 
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< continued from page 23 

factors: high-speed access to the Web, 
next-generation smart phones, GPS and 
longer battery life." He expects an impact 
on "mobile carriers' revenue models, as 
more and more content and services are 
able to take place off deck... The result 
will be more carriers making more of 
their revenue from data [transmission]." 

Stephen O'Grady, co-founder of 
analysis firm RedMonk, also sees the 
future belonging to the traditional desk- 
top browser moved to a mobile device. 
"At least in the near term, the future of 
mobile development is probably pure 
Web along with runtimes," he said. "The 
WebKit experience on the iPhone has 
triggered a great deal of competition, 
particularly within Mozilla, and we'll 
likely see the iPhone Web experience 
become more the rule than the excep- 
tion. But we'll also see rich clients 
exploit specialized handset functionality 
such as GPS, gyroscopes and the like." 

The vastly improved hardware and 
network throughput are not the primary 
drivers of this sea change. "The biggest 
jolt to the mobile Web development 
experience, in my view, has been the 
iPhone," O'Grady said. "Its implementa- 
tion of mobile Safari, while imperfect, has 
given handsets the real Internet, rather 



than the hobbled, niched version that was 
typical in devices that preceded it." 

What that means for the future, 
according to O'Grady, is that the mobile 
application space "will mirror the devel- 
opment on the client; it 
will evolve into a plat- 
form barely distinguish- 
able, in many respects, 
from the traditional desk- 
top browser experience." 

The World Wide Web 
Consortium sees it that 
way. In July, its Mobile 
Web Best Practices 
Working Group pub- 
lished the first draft of 
"Mobile Web Applica- 
tions Best Practices" for mobile Web 
application developers (w3.org/TR/2008 
/WDz-mwabp-20080729). 

'STABLE GUIDELINES' 

"Mobile Web content developers now 
have stable guidelines and maturing 
tools to help them create a better mobile 
Web experience," Dominique Hazael- 
Massieux, W3C mobile Web activity 
lead, said in a statement. "In support of 
the W3C mission of building One Web, 
we want to support the developer com- 
munity by providing tools to enable a 



great mobile Web user experience." 

Besides a preliminary list of best prac- 
tices on how to handle such matters as 
recommending push over pull for data 
transmissions and how to handle user 




he iPhone is not a "phone" 
any more than my laptop 
computer is a phone. The 
iPhone can make phone 
calls, but so can my laptop. ' 

—John Sullivan, manager of operations 
for the Free Software Foundation 



personalization information, the W3C is 
recommending XHTML as a "preferred 
format specification." According to the 
W3C best practices group, this marks 
"full convergence in mobile markup lan- 
guages, including those developed by the 
OMA [Open Mobile Alliance]." 

Bill Hughes, principal analyst for In- 
Stat's wireless research group, isn't as 
bullish about the switchover to Web- 
based applications for mobile devices. 
"The approach to mobile development is 
a strategic issue that is only partially 
affected by the available technology. The 



platform — whether to use a browser or 
to use an application development plat- 
form — is an issue that affects the devel- 
opment effort as well as the marketing 
of the application. 

"A company cannot 
consider one issue in iso- 
lation of the other," 
Hughes said. "It may be 
expedient to develop for 
use on a Web browser; 
however, my research 
shows that mobile device 
users have only recently 
started using the Web on 
their phones, even though 
the capability has been 
there for years if you 
knew where to look. 

"An optimist might say that all it will 
take is a really good reason, and users 
will flock to, say, using their Web brows- 
er. Perhaps. But the leading 'killer' 
mobile application that we have seen so 
far, wireless e-mail, has been resident on 
the device. The advantage of a phone 
application is that there is mechanism 
for users to get the application in a way 
that they are comfortable using." 

Another factor weighing against a 
standards-based, Web-centric approach 
to applications is that mobile companies 
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have invested heavily in those propri- 
etary software platforms. Their financial 
models are often tied to specific pack- 
ages with a wide variety of user features 
and restrictions. 

"I make predictions based upon past 
usage behavior and technology trends 
that have relevant analogies to the future 
of mobile devices," Hughes said. "With 
that context, I see growth in both envi- 
ronments: the browser and the mobile 
application environment. However, I am 
more optimistic about the growth poten- 
tial for applications on the mobile envi- 
ronment because there is the added sup- 
port to promote these applications." 

After all, Hughes noted, "the Apple 
App Store is not the first source for 
applications, but they have the most 
awareness. While they also promote 
Web applications, my expectation is that 
downloaded applications are more com- 
fortable for most users today." 

At the same time, the iPhone s use of 
the Web Kit browser has demonstrated 
that users don't need to be tied to a 
mobile vendor s WAP-based view of the 
Web. For example, with the iPhone, any 
mainstream (not tied to Internet Explor- 
er 6) online banking site is now usable. 

WebKit also enjoys broad corporate 
and developer support. For example, 



WebKit is already supported in Google's 
Linux-based Android, Mac OS X, Sym- 
bian OS, Trolltech's Qt and, on higher 
levels, by the GNOME (GNU Object 
Model Environment) Linux desktop 
environment and the Opera browser. 
Any application written toward a 
WebKit browser with XHTML should 
render almost as easily on a mobile 
device as it does on a PC. 

That slashes costs for mobile software 
developers in terms of time and money. 
Instead of dealing with the complexities 
of multiple hardware architectures, 
firmware types and mobile operator 
restrictions, they can focus on straightfor- 
ward Web development problems. 

Jonathan Younie, a software engineer 
for hedge fund Ramsey Quantitative 
Systems, believes in the more Web- 
friendly software development environ- 
ment. "WAP was a stopgap that allowed 
Internet-like functionality and availabili- 
ty of information to a class of phones 
that couldn't download data faster than a 
2,400-baud modem," he said. 

Today, Younie said, "European and 
Asian markets are ahead of the United 
States as far as the use of mobile tech- 
nology goes, but we're starting to catch 
up. The iPhone is far from revolutionary, 
other than its excellent implementation 
of a capacitive touch screen. Companies 
like HTC [the Taiwanese OEM behind 
many popular mobile phone brands] are 
leading the way in developing products 



that are fully capable mobile workplaces. 
They integrate functionality like dual 
cameras for mobile videoconferencing 
and office productivity applications." 

Of course, "due to the current cost of 
such high-productivity devices, they're 
only really available to the business pro- 
fessional that needs and can afford the 
technology," Younie added. "This does 
not create an exceptionally large market." 

MASS APPEAL 

It's not going to stay that way. "As new 
technology for high-speed Internet and 
high-powered mobile processing emerges 
and a generation of mobile-minded busi- 
nesspeople enters the workforce," Younie 
said, expect to see "high-capacity mobile 
workstations — phones with the capabili- 
ties of office functionality, constant Inter- 
net connection and full voice and video 
communications, with the integration of 
technologies like voice over IP, all at a rea- 
sonable cost. Currently, functionality like 
this is available but only at great expense. 
Most office functionality is available but is 
limited to the processing capacity of the 
phone. As those processors and memory 
catch up to the strength of modern lap- 
tops, look for [such functionality] to be 
available to a much wider generation of 
mobile professionals." 

That's not all; Younie also foresees 
"exceptionally advanced mobile enter- 
tainment systems. The mobile market is 
moving toward consolidation. We have a 



lot of mobile functionality, but it requires 
too many devices. Mobile video process- 
ing technology is also limited and quite 
costly. We have portable DVD players, 
glossy cell phones, portable gaming sys- 
tems, digital cameras and MP3/digital 
video players. Look for consolidation of 
these systems to hit the market in mass 
appeal to a younger generation. Granted, 
we have some pieces combined — cell 
phones with cameras/MP3 players, 
etc. — but these are mostly limited in 
capacity, especially the camera technolo- 
gy, and it's rare that anyone would 
replace a dedicated device with a phone 
version. The future will be different." 

Still, it seems too early to rule out 
device-based applications. The Linux- 
based Android and LiMo Foundation 
devices certainly offer open platforms 
for the already large Linux development 
circles. In addition, Nokia's decision to 
make Symbian open source has attract- 
ed a lot of programmer attention. 

That said, with WebKit on one side 
and the W3C offering standardization 
on the other, WAP appears to be on its 
last legs. It seems clear that tomorrow 
belongs to Web-based applications and 
Symbian- or Linux-based prediction. 
Let's hope this prophecy turns out better 
than the one about WAP. I 

Technology writer Steven }. Vaughan- 
Nichols has worked at NASA and the 
Department of Defense. 
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FROM THE EDITORS 

Read your licenses 

As any attorney will tell you, licenses matter. If you don't like the 
license terms for software or services, don't use the product. If you 
do use the product, make sure you obey the license terms. That applies 
to commercial software — and to software that you receive for free. 

Licenses are controversial in the free software world, whether you're 
using code that's governed by a version of the Free Software Founda- 
tion's GNU General Public License, the Apache license, the Eclipse 
license, Microsoft's shared source license or any of the many other legal 
documents attached to source code and binary bits. 

The onus is on the consumer — be it a development manager or corporate 
counsel — to examine and read licenses before, not after, using the software. 

The Software Freedom Law Center's guidelines, "A Practical Guide to 
GPL Compliance," will further developers' understanding of their oblig- 
ations under the GNU GPL — obligations that GPL violators should 
already have known upfront. 

The spirit of the license does not provide for companies to raid GPL 
code for the sole purpose of lowering their own development costs. 
According to the terms, if you modify or improve any GPL-licensed 
code, you may be compelled to share the new source code. If you don't 
want to do that, don't use GPL-licensed code. 

If you think sharing source code is a Faustian bargain, there are plen- 
ty of other licenses and open-source projects to choose from. Or you 
could simply write your own code. 

It would be unheard of to take code licensed by a big commercial vendor 
and to violate that license; developers know better, in no uncertain terms. 
But a license is a license is a license, whether the software is free or not. 
There is simply no justification for violating the GPL or any other license. 

The GNU community has begun a grass-roots effort to preserve the 
integrity of its license against past and present infringement. The FSF 
has even set up a Web page for the public to report any such violation. 

We advocate and support every organization's attempts to enforce its 
licenses, whether open source or not. The GPL has made meaningful 
contributions to the industry and to the evolution of software in general. 
It is unconscionable that any company would abuse its openness. Not 
every violation has occurred with nefarious intent, but each violation was 
avoidable. Read your license. 

Microsoft licenses and virtualization 

Speaking of licenses: We are pleased that Microsoft's server software 
licenses now accommodate virtualization. 

It was nettlesome for Microsoft to require its customers to reassign 
applications licenses that move from one processor to another, even if 
those applications were running in a virtual machine. Customers were 
inconvenienced and, worse, may have had to purchase additional licenses. 

Microsoft is also accommodating what has become a common load 
balancing operating: deploying multiple virtual servers on physical 
processors, and moving running applications among those processors. 

With this move, Microsoft is aligning itself with what the rest of the 
industry is already doing. The software giant didn't have to do that. The 
company could have easily used its licensing practices to squeeze every 
dime out of its customers and discourage anything outside of the status quo. 

But it did not, and for that, Microsoft deserves credit. It is demon- 
strating a welcome willingness to change with the times, as well as an 
understanding that virtualization has entered into mainstream use. Its 
decision to make virtualized instances of its products first-class citizens 
when it provides technical support demonstrates that it is willing to go 
the distance to accommodate virtualization. 

Of course, with Microsoft being Microsoft, there's a catch: The new 
license terms only apply to applications running on Microsoft's own vir- 
tualization server. That's unfortunate. But with Microsoft, half a victory 
is better than none. I 
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A few weeks ago, a client contacted 
me to see whether I would be inter- 
ested in working on a project to convert 
a 150,000-line Java codebase to C. 
Before responding, I decided to see 
what tools were available. Given the 
nearly infinite variety of open-source 
projects and the fact that C and Java 
dominate OSS projects, I figured there 
would be the usual wealth of 
tool choices available to auto- 
mate the conversion. 

To my amazement 
covered only a 
resources — and those 
mostly abandoned or 
projects; one-off commercial 
tools on rarely updated web- 
sites; and, in the case of GNU 
GCJ, a product that supports 
only Java 1.2. There's no 
good, comprehensive solution. So, how 
to proceed? 

One possible approach is to convert 
code semiautomatically: Put some 
pieces in place, use a set of filters (in 
AWK or Perl) to partially convert the 
Java, and then finish the job by hand. 
The pieces you'd have to put in place are 
substantial, but not overwhelming: A 
garbage collector (I'd use the Boehm- 
Demers-Weiser at hpl.hp.com/person- 
al/Hans_Boehm/gc), implementation of 
basic Java classes (such as String, some 
collections and some File classes) to 
which new classes are added as needed 
and, finally, some kind of object model. 
The final requirement is challenging; 
creating one from scratch requires lots 
of careful thinking. 

One solution is to use the GObject 
model from Glib (part of the Gnome 
open-source project), which is written in 
C. This would solve the problem of an 
object model, but it's an unforgiving 
path. First of all, it requires a steep 
learning curve and a lot of boilerplate 
code. Second, it means you have to ship 
some of the Gnome libraries with your 
product. Gnome is a great project for 
Linux, but its support for other plat- 
forms, especially Windows, is weak. 

The Vala project in Gnome 
(live.gnome.org/Vala) seeks to produce a 
simple OO language that compiles to C 
and uses Glib. This would be an almost 
ideal solution, were it not for the fragili- 
ty of the project, which is still early in its 
development cycle and, once again, is 
unfriendly to platforms other than Lin- 
ux. Essentially, if you choose the source 
code translation path, you'll need to 
write your own object model and devel- 
op your own quasi-OO syntax to match 
the Java you're working with. 

Another approach, I believe, is more 
likely to work: Start not from the Java 
source, but from the Java bytecodes. 

Interestingly, there are ways to con- 
vert C code without having to emulate 
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JVM operations. One is to translate the 
bytecodes back into a simple, declarative 
language from which C statements can 
be generated. A package that does this 
translation is Soot, from McGill Univer- 
sity in Canada (sable. mcgill.ca/soot). 
Soot, which is open source, was origi- 
nally designed as a framework for opti- 
mizing bytecodes. One of its by-prod- 
ucts was the ability to 
translate those bytecodes 
into a variety of easily parsed 
formats. 

The conversion to compil- 
able C that faithfully repli- 
cates the Java functionality is 
nontrivial. Part of the problem 
is that some data is lost when 
the Java compiler, javac, cre- 
ates bytecodes (for example, 
enums are enforced by javac, 
but the type data is not passed to the 
bytecodes). 

Another issue is the lack of symmetry 
between Java's assembly-level constructs 
and C. In a thesis on the topic 
(ptolemy.eecs.berkeley.edu/publications 
/papers/03/java-2-C), one student lists 
many of the issues, ranging from the 
prosaic, such as name length (C can 
require that names be disambiguated in 
the first 63 characters), to the seeming- 
ly intractable, such as C's lack of reflec- 
tion and its vastly different security 
model. To be fair, such problems are 
not unique to this approach; they would 
have to be solved in a source-level port 
as well. 

The JC compiler (jcvm.sourceforge 
.net) claims to have solved most of these 
problems. But the project has been sus- 
pended since 2005, and even then it had 
specific requirements. Despite that, it 
did manage, per its docs, to automate C 
to Java conversion. 

Working from binaries has one com- 
pelling advantage: It is inherently 
automatable, so that changes to the 
original Java codebase simply require a 
new build (whereas for a source port, 
each change to the Java side entails 
painstaking reconstruction in C). Had I 
accepted the project, I would have 
exhausted binary before going to source 
migration. 

This lack of conversion tools is 
unlikely to improve. Java is very fast 
today, so performance is no longer a big 
driver to convert to C. And since the 
Java Native Interface works well, native- 
to-java communication is no driver 
either. 

The project I was looking at, howev- 
er, was a Java library; and for that, you do 
need to convert. But you'll have to go it 
alone. I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. Read his hlog at 
hinstock.hlogspot. com. 
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Global decision-making 



Acting on the belief that "The World 
Is Flat," as the title of Tom Fried- 
man's book put it, isn't as seamless a 
process as originally thought. The global 
nature of IT service delivery is here to 
stay, but the ability to deliver IT services 
that are tacit in nature is far more chal- 
lenging. Labor arbitrage has pushed some 
IT services into the commodity realm. As 
a result, IT service vendors are 
discovering that it takes more 
than labor arbitrage to differen- 
tiate from the market. 

Topics that range from 
quality gaps to efficient service 
delivery are challenged when 
attempting to deliver services 
that are evolving to the tacit 
realm, and decision rights play 
a role that can affect the effi- 
ciencies of those services. 

Numerous factors can affect the appli- 
cation of organizational decisions. All 
must be evaluated and their attributes 
considered when devising a decision 
rights governance plan. Global work must 
factor in these considerations: 

Cultural differences. These 
include communications nuisances and 
the nuances of business relationships. 
Ingrained behaviors, such as caste sys- 
tems, figure here. 

Language barriers. Language can 
be the most obvious difference. This 
includes both grammatical and contex- 
tual use of language, written and spoken. 

Methodologies. Consider whether 
process models and certifications are 
U.S.- or international-based. 

Time zones. The greater the geo- 
graphic distance between teams, the 
greater the time zone difference's 
impact on an organization's ability to 
respond to requests in a timely fashion. 

Infrastructure. System environ- 
ment access and network communica- 
tions are contributors here. 

Networks. Both voice and data net- 
works are involved. There are also secu- 
rity and HR impacts here. 

Technical issues. Data sensitivity 
and security, firewalls and vulnerability, 
application inoperability and licensing 
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are just a few issues in this category. 

IT work that is more tacit in nature 
adds complexities that are not easy to 
overcome. The characteristics above are 
more easily addressed when process 
models and procedures are clearly 
defined. The new landscape of globally 
distributed IT work, however, is no 
longer as transactional as it used to be. 
Greater demands are 
being made of offshore 
teams to contribute at a tacit 
level — perhaps inappropri- 
ately so. Tacit work requires 
judgment-based decision- 
making. Such work generally 
requires experience in order 
make effective decisions that 
extend beyond the realm of 
following simple process. 
This proposition contradicts 
many offshore countries' IT workforce 
profiles; in many places, the average lev- 
el of experience is about five years. 
Nonetheless, a solution for decision 
rights and governance of globally distrib- 
uted teams must be achieved. A semi- 
globalized world is where we are today, 
and we should appropriately manage its 
expansion. 

Here are some methods for overcom- 
ing the divide: 

1. Acknowledge that the world is not 
flat, despite popular sentiment to the 
contrary. Look under the hood of any 
organization that does global work, and 
more often than not you'll find significant 
challenges associated with effectively 
delivering services. 

These challenges, however, do not 
outweigh the cost advantages that pre- 
sent themselves with the labor arbitrage 
associated with the use of offshore 
teams. Global work is not going away, so 
an organization is better off admitting 
the obvious and addressing the problem 
as a uniform distributed team, instead of 
fighting the tide of constant differences. 

2. Clearly define which team compo- 
nents drive service delivery. All too 
often, there is confusion between on-site 
and offshore teams regarding who is in 
charge. Roles must be clearly defined. 



25% of survey respondents expect 
their companies to spend less on corporate software over the next 90 
days than in the previous 90 days; 

12% expect their companies to spend more. 



44% 



Drop noted in corporate 
software spending 

Corporate software spending has taken a 
hit over the last 90 days, with one-quarter 
of company executives saying their com- 
pany has spent less on software in that 
time period than it had in the previous 90 
days, according to a survey conducted by 
RBC Capital Markets. In total, 1,902 execu- 
tives involved with their company's soft- 
ware procurement decisions were sur- 
veyed, RBC Capital Markets said. 



| said their company has no plans to purchase software over the next 90 days. 

1 30% said their company 
| doesn't need to purchase new software. 

1 14% say market conditions are preventing them 

l purchasing new software. 

1 28% said their company's capital 
| budget for the current guarter has been lowered in the last 90 days; 

1 9% said their budget has been increased in that time period. 
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Which teams are the "drivers" of the 
effort and which the "enablers"? 

For example, quite often on-site teams 
that deal directly with clients need the 
delivery enablement of offshore teams. 
The offshore teams should consider on- 
site staff as their "clients" and look to 
serve the needs of the overall team. 

Not having a customer-focused atti- 
tude can drive a wedge into productivity 
and create such confusion about deci- 
sion rights that nothing is ever accom- 
plished. Providing incentive for internal 
teams to operate with an internal-cus- 
tomer focus can drive desired behavior. 

3. Create a bilateral enablement and 
communications vehicle. Globally distrib- 
uted teams must be able to communicate 
effectively and work in a cohesive fashion. 
Such fluidity requires orchestration. A 
single project manager cannot be expect- 
ed to cover all of the facilitation bases. 

This is where a third-party enable- 
ment group comes into play. This team, 
or "brokerage," would embody all of the 
best interests of the overall organization 
yet be flexible enough to deal with indi- 
vidual cultural issues, time zone con- 
straints and language barriers. The bro- 
kerage would have the interests of the 
distributed team at heart (being bilateral) 
and would work with the team to deliver 
the project deliverables efficiently. Doing 
global work is challenging, and having an 
empowered facilitation engine can help 
to mitigate risk and resolve issues. 

4. Recognize the risks associated 
with a quality gap and mitigate exposure 
to it. A popular IT offshoring destina- 
tion, for example, is India; with labor 
rates that are one of the lowest world- 
wide and a growing pool of qualified 
resources, India is making its case to be 
a leader in offshore IT delivery. The 
challenge is that India's IT workers 
average significantly fewer years of rele- 
vant experience than their onshore 
counterparts do. For a team doing tacit 
work, that is a legitimate issue. 

A study commissioned by The 
National Association of Software and 
Service Companies, or Nasscom, found 
only one in four of India's engineering 
graduates to be employable. The rest are 
deficient in the required technical skills, 
fluency in English or ability to work in a 
team or deliver basic oral presentations. 
This is the landscape. An empowered 
brokerage can help to close this gap by 
coaching, providing feedback and distill- 
ing communications. 

There is no silver bullet to effective 
decision-rights management for globally 
distributed teams. Regrettably, the gener- 
al belief that the world is flat has prompt- 
ed many organizations to apply tactical 
solutions to problems that are fundamen- 
tally strategic. Organizations must reeval- 
uate where their capabilities lie and admit 
that distributed team governance is more 
challenging than originally conceived. I 

David Kapfhammer is director of strategy 
at Keane, a global IT consulting company. 
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Brief lessons on taking risks 



George Costanza, the buffoonish 
sidekick on "Seinfeld," was once 
tasked with giving a lecture on risk man- 
agement. Naturally, he failed miserably, 
unable to digest a thick textbook on the 
subject, unwilling to listen to the audio- 
book version and incapable of foisting it 
off on a subordinate. It's a good thing 
that George worked for the New York 
Yankees and not a software company. 

Although there is honest debate 
about the failure rate of software proj- 
ects, it's certainly higher than most pro- 
duction processes. The bodiless nature 
of software and the traditionally insular 
culture of programmers can allow fail- 
ure to seep in to a project that started 
well, and the lack of executive focus on 
software as a central business concern 
can crack the best-laid foundation. 

Fortunately, the best book on risk 
management for software projects is the 
furthest thing from a thick hardback 
tome. "Waltzing with Bears," by Tom 
DeMarco and Timothy Lister, is a trade 
paperback of fewer than 200 pages. Pub- 
lished in 2003, "Waltzing" starts by 
defining "risk" in the project manage- 
ment sense and explaining why risk is 
important to manage and why the temp- 
tations to ignore it are insidious. It then 
quickly moves into a broad discussion of 



risk discovery and quantification, sched- 
uling and risk management. 

Their shorthand definition, "A risk is a 
problem that has yet to occur; a problem 
is a risk that has already materialized" 
may be circular, but it's clear enough as a 
starting point. Since it is the goal of every 
project to avoid problems (good luck!), 
risk management is necessari- 
ly an exercise in probability. 
This is where DeMarco and 
Lister diverge most dramati- 
cally from the fictional authors 
on "Seinfeld." 

There's not a single P * (1 - 
P) in the book, and there is no 
index entry for Thomas Bayes; 
while this might offend the 
college professors of the world, 
it is a boon to busy profession- 
als. I've never seen a project in trouble 
because the manager couldn't define kur- 
tosis, but I've seen dozens of projects dis- 
cover that summing work estimates bears 
little relation to calendar progress. 

The graphs in the book are intention- 
ally roughed up to appear hand-drawn, 
and while I approve of the general hand- 
waving over the underlying mathematics, 
I fear that some readers will come away 
thinking that the curves are "just luck" 
rather than accurate pictures of what can 




and cannot be expected. (Incidentally: 
Microsoft Project is in its umpteenth 
release and still does not have probabili- 
ty-based scheduling. Primavera has Pert- 
master, and lesser-known products such 
as RiskyProject and Liquid Planner are 
well worth investigating.) 

The brevity of DeMarco and Lister's 
book broadens its appeal. 
There are only two prescrip- 
tions they make that might be 
considered related to devel- 
opment methodology: incre- 
mental delivery and starting 
early. These approaches are 
■ embraced by all methodolo- 
^fY gists (aside from those in the 

powerful "start late" lobby). 

"Waltzing with Bears" has 
been on my bookshelf since it 
came out, but I've been consulting it 
lately while planning a project. I've also 
been relying on "A Risk Profile of Off- 
shore-Outsourced Development Proj- 
ects," an article by Charalambos Iacovou 
and Robbie Nakatsu that appeared in 
the June 2008 issue of "Communications 
of the ACM" [tinyurl.com/5wfzua]. 

The chief take-away of the article is a 
list of the top 10 risk factors for offshore 
projects. While some of them are univer- 
sally applicable (a "lack of top manage- 



ment commitment"), the authors correct- 
ly identify others that are particularly 
problematic with offshore developers. 

For instance, a "lack of technical 
know-how" is always a risk to some 
degree, but it's definitely more of an 
issue with developers living in develop- 
ing economies, where books are relative- 
ly less affordable and there is far less 
access to conference-based training. 
Similarly, "language barriers on project 
communications" deserve being high- 
lighted; distributed development neces- 
sarily involves precision and subtlety 
that go beyond competence with "Busi- 
ness English." 

A risk profile such as one provided by 
Iacovou and Nakatsu is no magic bullet. 
No journal article can lay out a foolproof 
way to avoid a problem like "original set of 
requirements is miscommunicated," but I 
find such risk profiles to be quite helpful. 
Especially as a consultant or a new team 
member, you want to be sure that you've 
touched all of these bases before focusing 
on whatever acute need is causing imme- 
diate pain. While there is no room for a 
discussion of what to do regarding "inade- 
quate user involvement," if you know that 
it is a potential problem, you can take 
steps to mitigate it and, in that way, be 
master of your domain. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog at 
www. knowing, net. 
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Instantly Search Terabytes of Text 



♦ dozens of indexed, unindexed, fielded 
data and full-text search options 
(including Unicode support for hundreds 
of international languages) 

♦ file parsers / converters for 
hit-highlighted display of all popular 
file types 

♦ Spider supports static and dynamic web 
data; highlights hits while displaying 
links , formatting and images intact 

♦ API supports .NET, C++, Java, databases, 
etc. New .NET Spider API 
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Contact dtSearch for 
fully-functional evaluations 
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Text Retrieval® since 1991 



♦ "Bottom line: dtSearch manages a 
terabyte of text in a single index 
and returns results in less than a 
second" - InfoWorld 

♦ "For combing through large 
amounts of data," dtSearch "leads 
the market" - Network Computing 

♦ dtSearch "covers all data sources ... 
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Test Center 
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more reviews, and hundreds of 
developer case studies 
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Time's up for design-time governance 



Most SOA technologies have some 
value within the SOA stack; but as 
we learn more about SOA implementa- 
tions and what's really needed for suc- 
cess, many of the technologies out there 
don't seem to bring much to the table. 
This is a natural technology normaliza- 
tion process that occurs within any tech- 
nology trend; SOA is no exception. 

Governance is a clear requirement 
for SOA; you need someplace to track, 
secure, define and maintain services. 
Two very different SOA governance 
approaches have emerged: design time 
and runtime. 

Runtime SOA governance is more 
about operational requirements, includ- 
ing the ability to live up to service-level 
agreements (SLAs); execute policies 
around services; and make sure the ser- 
vices live and work well together in sup- 
port of the SOA, and thus in support of 
the business when executing. There is 
clear and well-defined value. I view this 
technology as critical to the SOA's success. 

Design-time SOA governance, as the 
name implies, typically provides an inte- 
grated registry/repository that attempts 
to manage a service from its design to its 
deployment, but typically not during 
runtime execution of the services 
(although some try). Key components of 



SOA Watch 



design-time SOA governance, generally 
speaking, include: 

• a registry and/or repository to track 
service design, management, policy 
and security, and to test artifacts; 

• design tools, including service model- 
ing, dependency tracking, policy cre- 
ation and management, and other 
tools that assist in the design 
of services; 

• deployment tools, including 
service deployment, typical- 
ly through binding with 
external development envi- 
ronments; 

• links to testing tools and 
services, letting the devel- 
oper or designer create a 
test plan and testing scenar- 
ios, and then leverage ser- 
vice-testing technology. 

In essence, design-time SOA gover- 
nance works up from the data to the ser- 
vices, gathering key information as it 
goes. Thus, you typically begin by defin- 
ing the underlying data schema and turn- 
ing that into metadata (and perhaps an 
abstraction of the data). Working up from 
there, you further define the services that 
interact with the data, data services and 
then transactional services on top of that. 
You can continue to define that into 




processes or orchestration. All of this 
occurs with design-time information that 
is managed within the design-time SOA 
governance system. I get that. 

The issue with design-time SOA gov- 
ernance technology is how far the tech- 
nology goes toward serving the true 
notion of "design" as outlined above. 
Most don't go that far, and 
many SOA designers are left 
wanting more robust features 
and functions, including true 
modeling and simulation 
capabilities based on SOA 
design and development best 
practices. Thus, most bypass 
design-time governance and 
go directly to runtime. 

Another issue is the lack of 
a standard approach to design- 
time SOA governance. While a few stan- 
dards are emerging, most SOA gover- 
nance technology providers have gone off 
in their own directions. Thus, not only are 
you picking a tool, but you're also picking 
a design approach, which may or may not 
be right for you or your architecture. Most 
SOA projects are being designed as best 
they can be using traditional office 
automation tools, and those seem to be 
working just fine. Not that it would be a 
bad thing to leverage a good design envi- 



ronment — but they just don't seem to 
exist within the design-time SOA gover- 
nance tools available today. 

Moreover, most of the design- time 
SOA governance tools I've seen seem to 
spend most of their time worrying about 
runtime issues such as SLAs, while offer- 
ing little that address the key design-time 
issues. Most SOA architects have become 
frustrated with the available design-time 
options and are resorting to spreadsheets 
as their design-time tools of choice. 

So, how do you fix the issues with 
design- time SOA governance tools? 

First, you work on a high-level 
approach that makes sense, and figure out 
how that approach binds into a larger 
SOA design and development methodolo- 
gy. There simply is no context and thus no 
value with the tools that exist today. 

Second, you're either a runtime tool 
or not, so figure out how deeply your 
tool needs to drive into that part of the 
architecture. My advice would be to do 
it well or don't do it at all. There are 
many runtime SOA governance tools 
that are already doing it well these days. 

Finally, create standards, technology 
and approaches that are consistent from 
tool to tool. Right now, they are all differ- 
ent and proprietary. That's a hard sell; peo- 
ple want durable, standard technology 
that will be strategic over a long period. I 

Reach analyst David S. Linthicum at 
david@linthicumgroup. com. 
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ANY WHO'S TRIED TO USE PERL 

on Red Hat's operating systems probably 
already knows about the tangled mess of 
show-stopping bugs that are present in 
the platform. The issue is that any Perl 
program using Bless more than once or 
twice will invariably become bogged 
down and slow to a veritable crawl. Red 
Hat is working on a patch, which should 
arrive relatively soon. But until then, 
thousands of users are stuck with a tool- 
box language that's slower than inter- 
preted BASIC. 

I can only imagine how tough it must 
be to fix this particular issue, since Red 
Hat's engineers seem to be ripping out 
floor boards and tearing down walls to 
fix it. What other explanation could 
there possibly be, since the bug has been 
open for almost a year now? This is the 
sort of thing that makes Red Hat look 
silly, frankly, and we're all hoping they 
get their act together. 

Now, if only Debian and Mozilla could 
nail down that memory leak they keep 
passing back and forth. — Alex Handy 

THERE ARE BLOOPERS, and then 
there are whoppers. Bloomberg News 
accidentally published an obituary of 
Apple co-founder Steve Jobs. Funny 
thing, because SD Times almost made 
the same mistake by publishing my 
own much more inglorious obit. 

Here is what it said » 
(with input from Joe 
Wilcox): "David Wor- 





thington, senior edi- 
tor of SD Times, was 
run down by a bus 
with a 'Midori' vanity plate, then was 
crushed by a Windows Vista sign hoist- 
ed in Times Square, and sucked into a 
Photosynth virtual world. He is a grad- 



SHORT TAKES 



uate of Temple University, and enjoys 
spicy food." — David Woirthington 

"IT'S WORKING." This was my "Wat- 
son, come here" moment, as my daugh- 
ter sent her first transmission from her 
new home, a dorm room at the Univer- 
sity of Maryland. 

I had bought her a Dell laptop with 
video chat capability, but apparently 
something in either the Norton antivirus 
firewall or the Microsoft Windows Vista 
firewall was preventing her from estab- 
lishing an online connection. Kudos 
go out to Mary- 
land's Office of Infor- 
mation Technology, 
which sent someone 
to her dorm room to 
adjust the setting and _ M 
configurations to make it work. 

To a teenager, life without an Inter- 
net connection is the same as being ship- 
wrecked on a deserted island, even in a 
dormitory bustling with activity. So 
when a chat box popped up on my 
screen at work with these two small 
words, a lifeline had been restored, and 
all was once again right with the world. 
— David Rubinstein 

DID JESSE JINX GMAIL? Recently, I 
spoke with Jesse Wilkins, a principal con- 
sultant with Access Sciences, about issues 
around the rising volumes of e-mail. 
Wilkins mentioned that Web-based e- 
mail providers are more robust and scal- 
able, and less likely to have an outage. 

"Gmail doesn't go down," he said. 
"Yahoo and Gmail don't go down, 
because they're using a scalable grid 
mesh infrastructure. If a server blows 
up, who cares? Pull it out, put in a new 
one, and off you go." 
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Looks like Jesse might have spoken 
too soon, as Gmail experienced two ser- 
vice outages in early August that left 
users without e-mail. Google attributed 
the outages to issues with loading con- 
tacts in the Webmail service. Maybe 
someone gave them a good old-fash- 
ioned jinx. — Jeff Feinman 

OVER THE YEARS, Scott Adams' 
"Dilbert" has lampooned many aspects 
of ISO 9000, such as the insistence that 
everything be labeled and every process 
documented. In one set of strips, a char- 
acter put a sign reading "coffee maker" 
next to the coffee maker, in order to sat- 
isfy ISO 9000 requirements. 

In large part, a company's auditable 
compliance with ISO 9000 has to do 
with the thoroughness of its documenta- 
tion. The standard is all 
about how you manage 
quality, not quality itself. 

So, what's new in ISO 
9001:2008? According to 
the ISO, not much: 

"ISO 9001:2008 will be 
edition of the standard which was first 
published in 1987. The third edition, 
published in 2000, represented a thor- 
ough revision, including new require- 
ments and a sharpened customer focus." 

Compared with the 2000 revision, 
ISO 9001:2008 represents fine-tuning, 
rather than a thorough overhaul. It 
introduces clarifications to the require- 
ments in ISO 9001:2000 (based on user 
experience over the last eight years) and 
includes changes that are intended to 
improve compatibility with the ISO 
14001:2004 standard for environmental 
management systems. 

I can't wait to see what Dilbert and 
Wally have to say about it! — Alan Zeichick 
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Google is selling its Performics search-engine marketing division 
to the Publicis Group, an advertising agency. Google absorbed 
Performics when it acguired Doubleclick, a digital marketing com- 
pany, and split it into a search marketing agency and an affiliate 
marketing group. Google had been looking to sell Performics 
because of conflict-of-interest concerns . . . Hewlett-Packard is 
acquiring Colubris Networks, a Waltham, Mass.-based provider of 
intelligent wireless networks for enterprises and service providers. 
HP said it would integrate Colubris' products into its ProCurve Net- 
working portfolio. The acquisition is expected to close by the end 
of HP's fiscal year 2008. Terms of the deal were not disclosed . . . 
Salesforce.com announced plans to acquire InStranet for US$31.5 
million. The deal would bolster Salesforce's customer service 
department, adding about 350,000 global call center agents, 
Salesforce executives said. InStranet is based in Chicago, with 
operations in Paris. It makes software aimed at helping customers 
at self-service Web portals get fast answers to problems . . . 
Telecommunications engineering company Averox reached an 
agreement to acquire the assets of Provisus, a U.K.-based soft- 
ware development company. Averox said a main reason for the 
acquisition was to add Provisus' provisioning and activation soft- 
ware to the Averox portfolio . . . Symantec is acquiring consumer 



security specialist PC Tools, in a deal expected to give Symantec 
a bigger reach in the consumer security market. PC Tools, based in 
Australia, will operate a subsidiary of Symantec's consumer busi- 
ness unit. Symantec already has PC utilities and anti-spyware 
products, but it is believed the deal is more about strengthening 
Symantec's strategy in that market . . . Microsoft and Novell 
expanded their 2006 interoperability agreement, with Microsoft 
buying US$100 million in additional SUSE Linux certificates. In 
November 2006, Microsoft committed $240 million to SUSE Lin- 
ux. Microsoft executives said the original commitment was suc- 
cessful, and the company has distributed more than 50% of it. 

EARNINGS: Hewlett-Packard reported net revenue of US$28 bil- 
lion for its fiscal third quarter, up 10% from the same quarter of fis- 
cal 2007 and up 5% when adjusted for currency fluctuations. 
GAAP operating profit was $2.5 billion; GAAP diluted earnings per 
share were 80 cents, up from 66 cents per share in the prior-year 
period . . . Wind River Systems announced fiscal 2009 second- 
quarter revenue of US$91.9 million, up from $84.6 million in the 
same quarter a year before. Net income for the fiscal 2009 quar- 
ter was $8.8 million, up from $4.3 million in the prior fiscal year's 
second quarter. I 
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Applications, Part 1 
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Eclipse 101 for Java Developers 



Java Persistence Freedom Through 
XML Binding 
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Practical Design Patterns for 
Rich Client Development 
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DevTest Studio 



The integrated solution lor defect tracking, test management and automated testing 



DevTrack 

Use DevTrack to track defects/issues 



u *ach issue through a definable 
worxnow 

SCM integration - track fixes against their 
source code deliverables 
Deploy a resolution across multiple 
releases, versions and products 
Reporting and metrics to illustrate the 
entire defect I if ecyc I e 



DevTest 

Use DevTest to manage your testing 

* Create a central repository for your test 
cases, knowledge items and automation 
scripts 

• Schedule releases and test cycles using \ 
wizard-driven interface 

* Execute test assignments and submit 
defects from the same interface 

• Track results with real-time dashboards 
and reports 



Test Link 

Use TestLinkto automate your testing 



Add automated tests to the Dev 1**1 

test library 

Schedule automated tests along with 

manual tests 

Launch automated tests from the 

DevTest interface 

Track automation results with 

real-time dashboards and reports 



TechExcel 

www.techexcei.com I 1-800-439-7782 



